Project

General

Profile

Bug #2936

Updated by Victor Julien about 5 years ago

Maybe a config issue or system overload? Or a bug? 

 <pre> 
 Apr    8 20:27:24 scomp1145 suricata[32151]: *** Error in `/bin/suricata': free(): invalid next size (fast): 0x00007fd66c1f8440 *** 

 Apr 10 21:05:39 scomp1145 suricata[32588]: *** Error in `/bin/suricata': realloc(): invalid pointer: 0x00007fac7383fd80 *** 

 Apr 11 08:12:35 scomp1145 suricata[30257]: *** Error in `/bin/suricata': corrupted size vs. prev_size: 0x00007fb364224150 *** 

 Apr 12 16:44:52 scomp1145 suricata[19697]: *** Error in `/bin/suricata': corrupted size vs. prev_size: 0x00007f3064205af0 *** 

 Apr 17 17:12:15 scomp1145 suricata[14654]: *** Error in `/bin/suricata': double free or corruption (out): 0x00007fd22c23caa0 *** 
 </pre> 

 Platform: 
 Red Hat Enterprise Linux Server release 7.6 (Maipo) 
 Kernel 3.10.0-957.10.1.el7.x86_64 
 PF-Ring 7.4.0 
 SE-Linux permissive 
 Hardware ProLiant DL380 G7, dual processor Xeon 5600 (24 cores), 141 GB RAM 

 Suricata: 
 # suricata --build-info 
 <pre> 
 This is Suricata version 4.1.3 RELEASE 
 Features: PCAP_SET_BUFF PF_RING AF_PACKET HAVE_PACKET_FANOUT LIBCAP_NG LIBNET1.1 HAVE_HTP_URI_NORMALIZE_HOOK PCRE_JIT HAVE_NSS HAVE_LIBJANSSON TLS MAGIC RUST  
 SIMD support: SSE_4_2 SSE_4_1 SSE_3  
 Atomic intrisics: 1 2 4 8 16 byte(s) 
 64-bits, Little-endian architecture 
 GCC version 4.8.5 20150623 (Red Hat 4.8.5-36), C version 199901 
 compiled with -fstack-protector 
 compiled with _FORTIFY_SOURCE=2 
 L1 cache line size (CLS)=64 
 thread local storage method: __thread 
 compiled with LibHTP v0.5.30, linked against LibHTP v0.5.30 

 Suricata Configuration: 
   AF_PACKET support:                         yes 
   eBPF support:                              no 
   XDP support:                               no 
   PF_RING support:                           yes 
   NFQueue support:                           no 
   NFLOG support:                             no 
   IPFW support:                              no 
   Netmap support:                            no 
   DAG enabled:                               no 
   Napatech enabled:                          no 
   WinDivert enabled:                         no 

   Unix socket enabled:                       yes 
   Detection enabled:                         yes 

   Libmagic support:                          yes 
   libnss support:                            yes 
   libnspr support:                           yes 
   libjansson support:                        yes 
   liblzma support:                           yes 
   hiredis support:                           no 
   hiredis async with libevent:               no 
   Prelude support:                           no 
   PCRE jit:                                  yes 
   LUA support:                               no 
   libluajit:                                 no 
   libgeoip:                                  yes 
   Non-bundled htp:                           no 
   Old barnyard2 support:                     no 
   Hyperscan support:                         yes 
   Libnet support:                            yes 
   liblz4 support:                            yes 

   Rust support:                              yes 
   Rust strict mode:                          no 
   Rust debug mode:                           no 
   Rust compiler:                             rustc 1.33.0 
   Rust cargo:                                cargo 1.33.0 

   Install suricatasc:                        yes 
   Install suricata-update:                   yes 

   Profiling enabled:                         no 
   Profiling locks enabled:                   no 

 Development settings: 
   Coccinelle / spatch:                       no 
   Unit tests enabled:                        no 
   Debug output enabled:                      no 
   Debug validation enabled:                  no 

 Generic build parameters: 
   Installation prefix:                       /usr 
   Configuration directory:                   /etc/suricata/ 
   Log directory:                             /var/log/suricata/ 

   --prefix                                   /usr 
   --sysconfdir                               /etc 
   --localstatedir                            /var 
   --datarootdir                              /usr/share 

   Host:                                      x86_64-pc-linux-gnu 
   Compiler:                                  gcc (exec name) / gcc (real) 
   GCC Protect enabled:                       yes 
   GCC march native enabled:                  yes 
   GCC Profile enabled:                       no 
   Position Independent Executable enabled: no 
   CFLAGS                                     -g -O2 -march=native -I${srcdir}/../rust/gen/c-headers 
   PCAP_CFLAGS                                 -I/usr/local/include 
   SECCFLAGS                                  -fstack-protector -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security 


 </pre> 

Back